Subscribe to Windows IT Pro
June 29, 2004 12:00 AM

6 Network Protocol Analyzers

Do you know what's passing over the wire? These products can tell you.
Windows IT Pro
InstantDoc ID #42922
Rating: (7)

EtherPeek contains many windows of data for each captured trace. You can display more than 90 different windows, summaries, and statistics and view the data from numerous angles. You perform most changes with one mouse click. Another unique feature of EtherPeek that I wish other products had is the ability to quickly filter out traffic you don't want to see in the display. I found this feature constantly useful, especially when trying to quickly filter out remote-monitoring traffic to concentrate on the real traffic problems.


EtherPeek
WildPackets - 925-937-3200 or 800-466-2447 www.wildpackets.com
PRICE: Starts at $3495; includes 1 year of standard support
DECISION SUMMARY
PROS:
Best GUI
Good expert-analysis mode
Many windows and reports with one click
CONS:
Some false-positive analysis errors
Separate products have separate platform support

Making a Choice
Rarely has a field been so full of worthy competitors as that of network protocol analyzers. Even the low-end open-source alternative, Ethereal, is feature-rich. You'd have a hard time going wrong by choosing any of these products. In a large,
distributed environment, Network Instruments' Observer appears to have the edge. Network Associate's Netasyst Network Analyzer has the best expert analysis, accurate decodes, and downloadable malware filters. Fluke Networks' OptiView Protocol Expert and WildPackets' EtherPeek are also solid choices for small-to-midsized networks and provide plenty of analysis features. LanHound is a solid protocol analyzer for the money but has stiff competition. My advice is to choose a product that has the feature set you're looking for in the price range your budget dictates.

Related Content:

ARTICLE TOOLS

Comments
  • haiwanxue
    6 years ago
    Mar 10, 2006

    good passage!

  • Anonymous User
    7 years ago
    Mar 23, 2005

    Good overview of some of the more popular protocol analyzers and their features. A matrix with comparison criteria and ratings would have been helpful. The posting made by the Anonymous user from Feb 14th, 2005 is worthless, not this article.

  • Anonymous User
    7 years ago
    Feb 14, 2005

    This article is worthless

  • Anonymous User
    7 years ago
    Jan 04, 2005

    Check our Greenleaf ViewComm System, excellent async and ethernet protocol analyzers - www.sysfire.com

  • Anonymous User
    8 years ago
    Nov 23, 2004

    One thing not touched on in the article is the major difference between a software and a hardware analyzer. Only good packets can be seen by a software analyzer. If the packet cannot make it up to the top layer of the OSI 7 Layer model, you won't see it. Also the quality of the network driver is important. Some LAN cards and drivers won't work or work properly in a promiscuous mode.

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.